Friday, November 14, 2025
HomeCyber Attacks

Cyber Attacks

MAD-CAT Meow Tool Sparks Real-World Data Corruption Attacks

The MAD-CAT tool represents a significant advancement in simulating data corruption threats, building on the infamous Meow attacks that began in 2020. Developed by Trustwave SpiderLabs researcher Karl Biron, MAD-CAT automates attacks across six vulnerable database platforms, highlighting persistent risks in misconfigured systems. This...

Monsta Web FTP Remote Code Execution Vulnerability Under Attack

Security researchers have uncovered a critical remote code execution (RCE) flaw in Monsta FTP, a popular web-based file transfer client, now actively exploited in the wild. Tracked as CVE-2025-34299, this unauthenticated vulnerability allows attackers to upload malicious files and execute arbitrary code on affected...

Authorities Dismantle Massive Credit Card Fraud Ring Affecting 4.3 Million Cardholders

Authorities dismantled three sophisticated fraud and money laundering networks that victimized over 4.3 million credit cardholders across 193 countries, causing damages exceeding €300 million. Dubbed Operation Chargeback, the effort was spearheaded by Germany's Cybercrime Department in Koblenz and the Federal Criminal Police Office (BKA),...

Cybersecurity Pros Accused Of Launching ALPHV BlackCat Ransomware Attacks On U.S. Businesses

Two self-proclaimed experts in digital defense stand accused of orchestrating some of the most devastating ransomware assaults on American companies. Federal prosecutors in the Southern District of Florida unsealed an indictment on October 3, 2025, charging Ryan Clifford Goldberg of Watkinsville, Georgia, and Kevin...

Conti Group Operative Responsible For Deploying Ransomware Extradited To The U.S.

A Ukrainian national accused of playing a key role in the infamous Conti ransomware operations has been extradited to the United States. Oleksii Oleksiyovych Lytvynenko, 43, appeared in federal court in the Middle District of Tennessee following his transfer from Ireland, where he had resided...

Gemini Vulnerability: ASCII Smuggling Attack Tricks AI Agents Into Leaking Data

A new vulnerability, known as "ASCII Smuggling," affects major Large Language Models (LLMs) like Google's Gemini, enabling attackers to deceive AI agents into leaking data, spoofing identities, and poisoning content. Research from FireTail in September 2025 exposed this security flaw, which poses an immediate...